vulnerability
Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
HighCVSS 8.6KEVEPSS 26%
Summary
Ivanti ICS products were targeted by attackers leveraging a zero-day vulnerability (CVE-2026-104935) despite Ivanti discovering and partially patching the flaw in July. The CISA has added the vulnerability to its KEV catalog, urging federal agencies to mitigate it by October 16th.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data
Also covered by 4 other source(s)
- CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure
- CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts
- CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks records
- Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks